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Amendments to the Claims 

Please amend claims 26 and 37. The Claim Listing below will replace all prior versions 
of the claims in the application: 

Claim Listing 

1 . (Previously Presented) A method of determining a network topology induced by 
network address translation, comprising: 

initiating communications, from a server behind a translating device, which effect 
the network address translation; and 

monitoring the communications beyond the translating device to infer partitioning 
of servers behind the translating device into equivalence sets relative to the network 
topology induced by the network address translation. 

2. (Original) The method according to Claim 1 wherein the communications include at least 
one source address in a message. 

3. (Original) The method according to Claim 2 wherein the source address includes an IP 

address. 

4. (Original) The method according to Claim 2 wherein a unique identification number is 
included in the message. 

5. (Original) The method according to Claim 1 wherein monitoring includes distinguishing 
between communications affected by and not affected by network address translation. 

6. (Original) The method according to Claim 5 wherein distinguishing includes comparing 
an apparent source address of a message against an actual source address provided in the 
message. 
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(Original) The method according to Claim 1 further comprising assessing a range of 
network addresses behind the translating device, 

(Original) The method according to Claim 1 further comprising assessing a range of 
public network addresses associated with the translating device. 

(Original) The method according to Claim 1 further comprising distinguishing between 
active and passive clients. 

(Original) The method according to Claim 9 further including directing a message from a 
passive client to an active client. 

(Original) The method according to Claim 9 further including, from a processor beyond 
the translating device, causing a message to a passive client to be redirected to an active 
client, the active client responsively commimicating with the processor beyond the 
translating device. 

(Original) The method according to Claim 1 wherein monitoring includes maintaining at 
least one translated address set. 

(Original) The method according to Claim 12 wherein monitoring further includes 
comparing apparent message source addresses with addresses in the translated address 
set. 

(Original) The method according to Claim 13 further including merging translated 
address sets in response to determining that multiple apparent source addresses in distinct 
translated address sets correspond to the same actual source address. 
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15. (Original) The method according to Claim 13 further including assessing whether the 
source address is behind a known address translation device. 

16. (Original) The method according to Claim 12 wherein maintaining includes providing a 
timeout mechanism for removing an address from a translated address set. 

17. (Original) The method according to Claim 1 further including commanding a new client 
to contact a known client behind the same network address translation device. 

18. (Original) The method according to Claim 1 wherein monitoring includes providing a 
soft-state mechanism to occasionally refresh partitioning. 

19. (Previously Presented) Apparatus to be located beyond a network address translation 
device for determining a topology of a network in the presence of network address 
translation, comprising: 

a processor coupled to a network interface for receiving communication from a 
network device effecting network address translation; and 

a processor routine operating on the processor, the processor routine to infer 
partitioning of servers behind a network address translation device into equivalence sets 
relative to the network topology induced by the network address translation. 

20. (Original) The apparatus according to Claim 19 wherein the messages received include at 
least one source address in the message. 

2 1 . (Original) The apparatus according to Claim 20 wherein the processor routine compares 
an apparent source address of a message against an actual source address provided in the 
message. 



22. 



(Original) The apparatus according to Claim 20 further including at least one translated 
address set, the source address being stored in the translated address set. 
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23. (Original) The apparatus according to Claim 19 wherein the processor is further coupled 
to memory, the processor routine storing a database of translated address sets in the 
memory. 

24. (Original) The apparatus according to Claim 23 wherein the processor routine includes a 
database manager to compare apparent message source addresses with addresses stored in 
the database of translated address sets. 

25. (Original) The apparatus according to Claim 24 wherein the database manager provides a 
timeout mechanism for removing translated addresses from the translated address sets in 
the database. 

26. (Currently Amended) Apparatus to be located behind a network address translation 
device for providing communications used to determine a topology of a network in the 
presence of network address translation, comprising: 

a processor behind a network address translation device coupled to a network 
interface, the processor initiating communications to a server beyond the network address 
translation device to effect network address translation; and 

a processor routine operating on said processor, said processor routine providing 
the actual network address of the processor in a message of the communications 
unaffected by the network address translation . 

27. (Original) The apparatus according to Claim 26 wherein said processor issues 
commimications in response to receiving a communication from behind the network 
address translation device. 

28. (Previously Presented) A computer program product comprising: 

a computer usable medium for storing data; and 
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a set of computer program instructions embodied on the computer usable medium, 
including instructions to: 

receive communications from a network device effecting network address 
translation; and 

infer partitioning of servers behind a network address translation device 
into equivalence sets relative to the network topology induced by the network 
address translation. 

29. (Previously Presented) Apparatus for determining a topology of a network in the presence 
of network address translation, comprising: 

means for initiating communications from a network which effects network 
address translation; and 

means for monitoring the communication to infer partitioning of servers behind a 
network address translation device into equivalence sets relative to the network topology 
induced by the network address translation. 

30. (Previously Presented) In a network device beyond a network address translation device, 
a method for determining a topology of a network in the presence of network address 
translation, the method comprising: 

receiving communication messages from a network device effecting network 
address translation; and 

inferring partitioning of servers behind a network address translation device into 
equivalence sets relative to the network topology induced by the network address 
translation. 

3 1 . (Original) The method according to Claim 30 wherein the messages received include at 
least one source address in the message. 

32. (Original) The method according to Claim 3 1 frirther including comparing an apparent 
source address of a message against an actual source address provided in the message. 
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(Original) The method according to Claim 3 1 further including maintaining at least one 
translated address set, the source address being stored in the translated address set, 

(Original) The method according to Claim 30 fiirther including storing a database of 
translated address sets. 

(Original) The method according to Claim 34 further including comparing apparent 
message source addresses with addresses stored in the database of translated address sets. 

(Original) The method according to Claim 35 further including removing translated 
addresses from the translated address sets in the database after exceeding a timeout 
duration. 

(Currently Amended) In a network device located behind a network address translation 
device, a method for providing communications used to determine a topology of a 
network in the presence of network address translation, the method comprising: 

initiating communications to a server beyond a network address translation device 
to effect network address translation; and 

providing the actual network address of a processor, behind the network address 
translation device, in a message of the communications unaffected by the network 
address translation . 

(Original) The method according to Claim 37 further including issuing communications 
in response to receiving a communication from behind the network address translation 
device. 



